Virusscan Enterprise 7.1.0 Installation Guide

Installation Guide Revision 1.0 VirusScan® Enterprise version 7.1.0 COPYRIGHT © 2003 Networks Associates Technology, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Networks Associates Technology, Inc., or its suppliers or affiliate companies. To obtain this permission, write to the attention of the Network Associates legal department at: 5000 Headquarters Drive, Plano, Texas 75024, or call +1-972-963-8000. TRADEMARK ATTRIBUTIONS Active Firewall, Active Security, Active Security (in Katakana), ActiveHelp, ActiveShield, AntiVirus Anyware and design, Appera, AVERT, Bomb Shelter, Certified Network Expert, Clean-Up, CleanUp Wizard, ClickNet, CNX, CNX Certification Certified Network Expert and design, Covert, Design (stylized N), Disk Minder, Distributed Sniffer System, Distributed Sniffer System (in Katakana), Dr Solomon’s, Dr Solomon’s label, E and Design, Entercept, Enterprise SecureCast, Enterprise SecureCast (in Katakana), ePolicy Orchestrator, Event Orchestrator (in Katakana), EZ SetUp, First Aid, ForceField, GMT, GroupShield, GroupShield (in Katakana), Guard Dog, HelpDesk, HelpDesk IQ, HomeGuard, Hunter, Impermia, InfiniStream, Intrusion Prevention Through Innovation, IntruShield, IntruVert Networks, LANGuru, LANGuru (in Katakana), M and design, Magic Solutions, Magic Solutions (in Katakana), Magic University, MagicSpy, MagicTree, McAfee, McAfee (in Katakana), McAfee and design, McAfee.com, MultiMedia Cloaking, NA Network Associates, Net Tools, Net Tools (in Katakana), NetAsyst, NetCrypto, NetOctopus, NetScan, NetShield, NetStalker, Network Associates, Network Performance Orchestrator, Network Policy Orchestrator, NetXray, NotesGuard, nPO, Nuts & Bolts, Oil Change, PC Medic, PCNotary, PortalShield, Powered by SpamAssassin, PrimeSupport, Recoverkey, Recoverkey – International, Registry Wizard, Remote Desktop, ReportMagic, RingFence, Router PM, Safe & Sound, SalesMagic, SecureCast, SecureSelect, Service Level Manager, ServiceMagic, SmartDesk, Sniffer, Sniffer (in Hangul), SpamKiller, SpamAssassin, Stalker, SupportMagic, ThreatScan, TIS, TMEG, Total Network Security, Total Network Visibility, Total Network Visibility (in Katakana), Total Service Desk, Total Virus Defense, Trusted Mail, UnInstaller, VIDS, Virex, Virus Forum, ViruScan, VirusScan, WebScan, WebShield, WebShield (in Katakana), WebSniffer, WebStalker, WebWall, What's The State Of Your IDS?, Who’s Watching Your Network, WinGauge, Your E-Business Defender, ZAC 2000, Zip Manager are registered trademarks or trademarks of Network Associates, Inc. and/or its affiliates in the US and/or other countries. Sniffer® brand products are made only by Network Associates, Inc. All other registered and unregistered trademarks in this document are the sole property of their respective owners. LICENSE INFORMATION License Agreement NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO NETWORK ASSOCIATES OR THE PLACE OF PURCHASE FOR A FULL REFUND. Attributions This product includes or may include: Software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). Cryptographic software written by Eric A. Young ([email protected]) and software written by Tim J. Hudson ([email protected]). Some software programs that are licensed (or sublicensed) to the user under the GNU General Public License (GPL) or other similar Free Software licenses which, among other rights, permit the user to copy, modify and redistribute certain programs, or portions thereof, and have access to the source code. The GPL requires that for any software covered under the GPL which is distributed to someone in an executable binary format, that the source code also be made available to those users. For any such software covered under the GPL, the source code is made available on this CD. If any Free Software licenses require that Network Associates provide rights to use, copy or modify a software program that are broader than the rights granted in this agreement, then such rights shall take precedence over the rights and restrictions herein. Software originally written by Henry Spencer, Copyright 1992, 1993, 1994, 1997 Henry Spencer. Software originally written by Robert Nordier, Copyright © 1996-7 Robert Nordier. All rights reserved. Software written by Douglas W. Sauder. Software developed by the Apache Software Foundation (http://www.apache.org/). International Components for Unicode (“ICU”) Copyright © 1995-2002 International Business Machines Corporation and others. All rights reserved. Software developed by CrystalClear Software, Inc., Copyright © 2000 CrystalClear Software, Inc. FEAD® Optimizer® technology, Copyright Netopsystems AG, Berlin, Germany.

Issued SEPTEMBER 2003 / VirusScan® Enterprise software version 7.1.0

DOCUMENT BUILD 005-EN Contents

Preface ...... 5

Audience ...... 5 Conventions ...... 6 Getting information ...... 7 Contacting McAfee Security & Network Associates ...... 8

1 Installing the Software ...... 9

Before you begin ...... 10 Pre-installation procedures ...... 10 System requirements ...... 11 Server requirements ...... 11 Workstation requirements ...... 12 Deployment, updating, and management options ...... 13 Pre-configuring the installation package ...... 13 Using McAfee AutoUpdate Architect and McAfee Installation Designer ...... 14 Using ePolicy Orchestrator ...... 14 Installation and configuration for use with other products ...... 15 Netopsystems’ FEAD® Optimizer® ...... 16 Windows Terminal Server ...... 16 EMC Celerra™ server ...... 16 Check Point™ ...... 16 Product license ...... 17 Installing VirusScan Enterprise ...... 18 Using the Setup utility ...... 19 Starting the installation process ...... 23 Typical installation ...... 24 Custom installation ...... 26 Using the command line ...... 33 Installing silently ...... 34 Installing to a custom directory ...... 36 Selecting specific features to install ...... 36 Customizing installation properties ...... 38

Installation Guide iii Contents

Setting restart options ...... 40 Removing incompatible software ...... 40 Preserving settings ...... 41 Running Setup from a login script ...... 41 Installed files ...... 41 VirusScan folder ...... 42 Res09 folder ...... 43 Engine folder ...... 43 Testing your installation ...... 44 Modifying VirusScan Enterprise ...... 45 Starting the Setup utility ...... 45 Modifying program features ...... 47 Reinstalling or repairing program files ...... 49

2 Removing the Software ...... 53

Using the Setup utility ...... 54 Using the command line ...... 57 Using the Add/Remove Programs utility ...... 57

A Configuring Netopsystems’ FEAD Optimizer ...... 59

Command-line properties and switches ...... 59 Optimized file defaults ...... 60

B Configuring Check Point ...... 61

Client computer installation ...... 62 Administrator configuration ...... 63

Index ...... 65

iv VirusScan® Enterprise software version 7.1.0 Preface

This guide introduces McAfee® VirusScan® Enterprise software version 7.1.0, and provides the following information:

Detailed instructions for installing the software.

Procedures for modifying the software.

Procedures for removing the software.

Information on configuring Netopsystems’ FEAD® Optimizer®.

Information on configuring Check Point™.

Audience This information is intended primarily for two audiences:

Network administrators who are responsible for their company’s anti-virus and security program.

Users who are responsible for updating virus definition (DAT) files on their workstation, or configuring the software’s detection options.

Installation Guide 5 Preface Conventions This guide uses the following conventions:

Bold All words from the user interface, including options, menus, buttons, and dialog box names.

Example Type the User name and Password of the desired account.

Courier Text that represents something the user types exactly; for example, a command at the system prompt.

Example To enable the agent, run this command line on the client computer: FRMINST.EXE /INSTALL=AGENT /SITEINFO=C:\TEMP\SITELIST.XML

Italic For emphasis or when introducing a new term; for names of product manuals and topics (headings) within the manuals.

Example Refer to the VirusScan Enterprise Product Guide for more information.

Angle brackets enclose a generic term.

Example In the console tree under ePolicy Orchestrator, right-click .

NOTE Supplemental information; for example, an alternate method of executing the same command.

WARNING Important advice to protect a user, computer system, enterprise, software installation, or data.

6 VirusScan® Enterprise software version 7.1.0 Getting information Getting information

Installation Guide *† System requirements and instructions for installing and starting the software. VirusScan Enterprise 7.1.0 Installation Guide

Product Guide * Product introduction and features, detailed instructions for configuring the software, information on deployment, recurring tasks, and operating procedures. VirusScan Enterprise 7.1.0 Product Guide McAfee AutoUpdate Architect™ Product Guide McAfee Installation Designer™ Product Guide Alert Manager™ Product Guide ePolicy Orchestrator™ Product Guide

Help § High-level and detailed information on configuring and using the software. What’s This? field-level help.

Release Guide * High-level description of new and changed features for this version of the product.

Configuration Guide * For use with ePolicy Orchestrator™. Procedures for configuring, deploying, and managing your McAfee Security product through ePolicy Orchestrator management software.

Implementation Guide * Supplemental information for product features, tools, and components.

Release Notes ‡ ReadMe. Product information, resolved issues, any known issues, and last-minute additions or changes to the product or its documentation.

Contacts ‡ Contact information for McAfee Security and Network Associates services and resources: technical support, customer service, AVERT (Anti-Virus Emergency Response Team), beta program, and training. This file also includes phone numbers, street addresses, web addresses, and fax numbers for Network Associates offices in the United States and around the world.

* An Adobe Acrobat .PDF file on the product CD or the McAfee Security download site. † A printed manual that accompanies the product CD. Note: Some language manuals may be available only as a .PDF file. ‡ Text files included with the software application and on the product CD. § Help accessed from the software application: Help menu and/or Help button for page-level help; right-click option for What’s This? help.

Installation Guide 7 Preface Contacting McAfee Security & Network Associates

Technical Support Home Page http://www.networkassociates.com/us/support/ KnowledgeBase Search https://knowledgemap.nai.com/phpclient/homepage.aspx PrimeSupport Service Portal * http://mysupport.nai.com McAfee Security Beta Program http://www.networkassociates.com/us/downloads/beta/ Security Headquarters — AVERT (Anti-Virus Emergency Response Team) Home Page http://www.networkassociates.com/us/security/home.asp Virus Information Library http://vil.nai.com Submit a Sample — https://www.webimmune.net/default.asp AVERT WebImmune AVERT DAT Notification http://www.networkassociates.com/us/downloads/updates/ Service Download Site Home Page http://www.networkassociates.com/us/downloads/ DAT File and Engine Updates http://www.networkassociates.com/us/downloads/updates/ ftp://ftp.nai.com/pub/antivirus/datfiles/4.x Product Upgrades * https://secure.nai.com/us/forms/downloads/upgrades/login.asp Training McAfee Security University http://www.networkassociates.com/us/services/education/mcafee/unive rsity.htm Network Associates Customer Service E-mail [email protected] Web http://www.nai.com/us/index.asp http://www.networkassociates.com/us/products/mcafee_security_home .htm US, Canada, and Latin America toll-free: Phone +1-888-VIRUS NO or +1-888-847-8766 Monday – Friday, 8 a.m. – 8 p.m., Central Time For additional information on contacting Network Associates and McAfee Security— including toll-free numbers for other geographic areas — see the Contact file that accompanies this product release.

* Logon credentials required.

8 VirusScan® Enterprise software version 7.1.0 Installing the Software 1

The VirusScan Enterprise 7.1.0 software supports both servers, workstations, and many third-party applications. It is a replacement for:

VirusScan Enterprise version 7.0 software for workstations and servers.

VirusScan version 4.5.1 software for workstations.

NetShield NT version 4.5 software for servers.

NetShield for Celerra™ version 4.5 for Celerra™ filers.

These topics are included in this section:

Before you begin on page 10.

Installing VirusScan Enterprise on page 18.

Modifying VirusScan Enterprise on page 45.

Installation Guide 9 Installing the Software Before you begin Before you start the installation, we recommend that you review these topics to ensure that you are prepared:

Pre-installation procedures on page 10.

System requirements on page 11.

Deployment, updating, and management options on page 13.

Installation and configuration for use with other products on page 15.

Product license on page 17.

Pre-installation procedures Complete these procedures before beginning the installation process:

Product software — Locate the VirusScan Enterprise 7.1.0 software.

McAfee Security distributes VirusScan Enterprise software in two ways:

As an archive file that you can download from the web. Go to the McAfee Security download web site to download the archive file. See Contacting McAfee Security & Network Associates on page 8.

On a product CD.

Readme — Locate the Readme file and read it thoroughly to identify special installation instructions or issues. The Readme file can be found in the same location as the product software.

Installation rights — Verify that you have the appropriate rights to install the software. To install VirusScan Enterprise, you must have local administrator rights for the computer on which you plan to install the program.

Preserve settings — When upgrading from an earlier version of the software, decide whether you want to preserve settings.

If you are installing VirusScan Enterprise 7.1.0 on a computer with an earlier version of NetShield, VirusScan, or VirusScan Enterprise, you have the option of preserving the settings from the earlier version of the software. If you preserve settings, saved tasks, user-specified extensions, and exclusion settings are saved from the previously installed version.

Alternatively, you can remove the previous version of the software first, then install VirusScan Enterprise 7.1.0. If you use this method, you lose the settings from the previous version of the software.

10 VirusScan® Enterprise software version 7.1.0 Before you begin

System requirements Verify that your computer meets the following system requirements before you start the installation process.

Server requirements The VirusScan Enterprise software installs and runs on a server equipped with:

Processor — An Intel processor or compatible architecture. McAfee Security recommends an Intel Pentium processor or Celeron running a minimum of 166MHz.

Operating system — Any of these Microsoft Windows platforms:

Windows NT Server 4.0, with Service Pack 6 or 6a.

Windows NT Enterprise Server 4.0, with Service Pack 6 or 6a. Windows NT Terminal Server Edition, with Service Pack 6.

Windows 2000 Server, with Service Pack 1, 2, or 3.

Windows 2000 Advanced Server, with Service Pack 1, 2, or 3.

Windows 2000 DataCenter Server, with Service Pack 1, 2, or 3. Windows Server 2003 Standard (formerly known as Windows .NET Server 2003, Standard Edition). Windows Server 2003 Enterprise (formerly known as Windows .NET Server 2003, Enterprise Edition). Windows Server 2003 Web (formerly known as Windows .NET Server 2003, Web Edition). Windows Server 2003 DataCenter.

Browser — Microsoft Internet Explorer, version 4.0 or later.

Memory — 32MB RAM minimum.

NOTE For information on optimal operating system performance, review Microsoft’s guidelines for minimum RAM configuration.

Installation Guide 11 Installing the Software

Free disk space — Adequate hard disk space:

20MB — A complete installation of all the program’s features and components occupies approximately 20MB of disk space on your computer.

25MB — The installation process uses an additional 25MB of temporary disk space, which is freed when the installation is complete.

Other — A CD-ROM drive or an Internet connection.

Workstation requirements The VirusScan Enterprise software installs and runs on a workstation equipped with:

Processor — An Intel processor or compatible architecture. McAfee Security recommends an Intel Pentium processor or Celeron running a minimum of 166MHz.

Operating system — Any of these Microsoft Windows platforms: Windows NT Workstation 4.0, with Service Pack 6 or 6a.

Windows 2000 Professional, with Service Pack 1, 2, or 3.

Windows XP Home, Professional, and Tablet PC Edition, with Service Pack 1.

Browser — Microsoft Internet Explorer, version 4.0 or later.

Memory — 32MB RAM minimum.

NOTE For information on optimal operating system performance, review Microsoft’s guidelines for minimum RAM configuration.

Free disk space — Adequate hard disk space:

20MB — A complete installation of all the program’s features and components occupies approximately 20MB of disk space on your computer.

25MB — The installation process uses an additional 25MB of temporary disk space, which is freed when the installation is complete.

Other — A CD-ROM drive or an Internet connection.

12 VirusScan® Enterprise software version 7.1.0 Before you begin

Deployment, updating, and management options Decide how you plan to deploy, manage, and update the product. If you use supporting tools to deploy, pre-configure, update, or manage VirusScan Enterprise, the installation procedure may vary.

To pre-configure the VirusScan Enterprise installation package we recommend that it includes:

Where and how you get updates.

When you check for updates (the default is Friday at 17:00 local time to the computer).

Which policy settings should be defined.

Pre-configuring the installation package You can pre-configure the VirusScan Enterprise installation package using these methods:

Using McAfee AutoUpdate Architect and McAfee Installation Designer on page 14.

Using ePolicy Orchestrator on page 14.

Installation Guide 13 Installing the Software

Using McAfee AutoUpdate Architect and McAfee Installation Designer To use McAfee AutoUpdate Architect and McAfee Installation Designer to pre-configure the installation package, follow these steps:

NOTE If you plan to use the Network Associates FTP or HTTP update sites as your update location, skip Step 1 and Step 2. The VirusScan Enterprise software comes pre-configured to get updates from these locations. The FTP site is the default location and the HTTP site is configured as the next location in the repository list.

For more information about updating or using the Network Associates FTP or HTTP update sites, see the VirusScan Enterprise 7.1.0 Product Guide.

1 Install McAfee AutoUpdate Architect and use it to configure the VirusScan Enterprise repository list, SITELIST.XML. See the McAfee AutoUpdate Architect Product Guide for more information. The repository list contains the available updating sites that VirusScan Enterprise uses for updating.

2 Export the repository list, SITELIST.XML, to a temporary folder.

3 Install McAfee Installation Designer and use it to customize the installation options for VirusScan Enterprise 7.1.0. See the McAfee Installation Designer Product Guide for more information.

Using ePolicy Orchestrator If you installed ePolicy Orchestrator prior to deploying VirusScan Enterprise 7.1.0, you can use it to pre-define the policy settings and update configuration. See the VirusScan Enterprise Configuration Guide for use with ePolicy Orchestrator for more information.

NOTE We recommend that before you use ePolicy Orchestrator to push the software to client computers, you use McAfee Installation Designer to replace or update the default virus definition (DAT) and engine files that are included in the installation package. This ensures that the client computer has the most current protection at installation time and also saves network bandwidth by not having to retrieve the updated files after installation.

The options you have available to you depend on which version of ePolicy Orchestrator you are using.

14 VirusScan® Enterprise software version 7.1.0 Before you begin

Using ePolicy Orchestrator 3.0 ePolicy Orchestrator version 3.0 or later includes McAfee AutoUpdate Architect, which can be used to create and manage your update repositories. This ensures that product installations and updates are applied from a local source. See the McAfee AutoUpdate Architect Product Guide for more information. You can easily define and modify VirusScan Enterprise policies and updates using ePolicy Orchestrator 3.0. See the VirusScan Enterprise Configuration Guide for use with ePolicy Orchestrator 3.0 for more information.

When using ePolicy Orchestrator 3.0, we recommend that you use the McAfee AutoUpdate Architect that is included in ePolicy Orchestrator, to create the repositories prior to deploying VirusScan Enterprise 7.1.0.

Using ePolicy Orchestrator 2.5.x ePolicy Orchestrator version 2.5.x can manage VirusScan Enterprise policies. However, ePolicy Orchestrator 2.5.x does not include McAfee AutoUpdate Architect, so you must use a stand-alone version of McAfee AutoUpdate Architect to create and manage your update repositories. To use created repository sites, you first need to define the VirusScan Enterprise AutoUpdate tasks in ePolicy Orchestrator 2.5.x. See the VirusScan Enterprise Configuration Guide for use with ePolicy Orchestrator 2.5.x for more information.

Installation and configuration for use with other products If you are installing the VirusScan Enterprise software where third party products are installed, or plan to use the VirusScan Enterprise software with supporting products, you may be required to vary the installation procedure or perform additional configuration.

These topics are included in this section:

Netopsystems’ FEAD® Optimizer® on page 16.

Windows Terminal Server on page 16.

EMC Celerra™ server on page 16.

Check Point™ on page 16.

Installation Guide 15 Installing the Software

Netopsystems’ FEAD® Optimizer® The VirusScan Enterprise 7.1.0 installation file (.MSI) has been optimized using the Netopsystems’ Fast Electronic Application Distribution (FEAD® Optimizer®) technology. This significantly reduces the size of the installation file until it is recomposed.

If using the Setup utility to install the VirusScan Enterprise software, the file is automatically recomposed before the installation begins.

When executing SETUP.EXE from the command line, you can apply special command-line properties and switches to recompose the installation files. See Configuring Netopsystems’ FEAD Optimizer on page 59 for more information.

McAfee Installation Designer can also be used to recompose the installation file, then optimize it again after changes have been made. See the McAfee Installation Designer Product Guide for more information.

Windows Terminal Server If Windows NT Terminal Server Edition, or Windows 2000 or 2003 Terminal Server Application is installed, and the Setup utility is used to install the VirusScan Enterprise software, the installation stops and the user is notified that they must install the product using the Add/Remove Programs utility that is included in the Windows Control Panel.

To access the Add/Remove Programs utility, click Start, then select Settings | Control Panel | Add/Remove Programs.

NOTE This installation method is not required if you are using ePolicy Orchestrator to deploy the VirusScan Enterprise software.

EMC Celerra™ server If you are installing the VirusScan Enterprise software to an EMC Celerra server, you must first install the EMC Scanner Server software, then install the VirusScan Enterprise 7.1.0 software. This ensures that the VirusScan Enterprise software configures correctly with the EMC Celerra server settings.

Check Point™ The VirusScan Enterprise software has been enhanced to integrate with Check ™ ® Point VPN-1/FireWall-1 SCV. This integration allows you to prevent clients without up-to-date anti-virus protection from accessing the corporate network through the Virtual Private Network (VPN). See Configuring Check Point on page 61 for more information.

16 VirusScan® Enterprise software version 7.1.0 Before you begin

Product license If you are installing a licensed version of the VirusScan Enterprise 7.1.0 software for the first time, the product is licensed during the installation process. Skip this section and go to Installing VirusScan Enterprise on page 18.

If you are installing a licensed version of the VirusScan Enterprise 7.1.0 software over an evaluation version, you must upgrade the evaluation version to a licensed version. The license does not automatically upgrade itself if you are installing over an evaluation version.

WARNING You must perform the license upgrade before the evaluation period expires. If you do not, the scanning and updating functions will stop until you replace the evaluation version with a licensed version of the product.

Use one of these methods to upgrade an evaluation version of VirusScan Enterprise to a licensed version:

Use the McAfee Installation Designer to upgrade an installed evaluation version to a licensed version:

Install the licensed version of VirusScan Enterprise.

Use McAfee Installation Designer to upgrade the license. Refer to the McAfee Installation Designer Product Guide for specific details.

Remove the existing evaluation version of the product and install the licensed version of the product. If you use this method, you lose all of the settings you selected for the previous installation. This method is only recommended if you cannot use McAfee Installation Designer to upgrade the license.

Installation Guide 17 Installing the Software Installing VirusScan Enterprise You can install the VirusScan Enterprise program files on either a server or workstation.

NOTE The installer determines whether you are installing to a server or a workstation and sets a registry value for ePolicy Orchestrator reporting (via plug-in) to either McAfee VirusScan Enterprise Server or McAfee VirusScan Enterprise Workstation.

This allows ePolicy Orchestrator to distinguish between a server and a workstation for reporting and policy enforcement purposes.

Use any of these methods to install the VirusScan Enterprise software:

The Setup utility that comes with the VirusScan Enterprise software.

The command line.

McAfee Installation Designer can be used to create a customized installation package and to configure product settings. See the McAfee Installation Designer Product Guide for detailed instructions.

Review the System requirements starting on page 11 before you begin the installation process.

These topics are covered in this section:

Using the Setup utility on page 19.

Using the command line on page 33.

Installed files on page 41.

Testing your installation on page 44.

18 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise

Using the Setup utility On the computer that you want to install the program:

1 Open the McAfee VirusScan Enterprise Setup dialog box using one of these methods:

If your copy of the software is on the product CD:

a Insert the CD into the CD-ROM drive.

b Click Install from the Welcome dialog box.

If you are downloading the software:

a Create a temporary folder on your hard drive.

b Download the archive file from the McAfee Security download web site. See Contacting McAfee Security & Network Associates on page 8.

c Use a decompression utility, such as WinZip, to extract the files you downloaded to this folder.

d Click Start, then select Run. The Run dialog box appears.

Figure 1-1. Run

e Type :\SETUP.EXE in the text box, then click OK.

Here, : represents the drive letter for your CD-ROM, or the path of the folder that contains the extracted program files. To search for the correct files on your hard disk or CD, click Browse. If your copy of the software came on a product suite CD, you must also specify which folder contains the specific software package.

Installation Guide 19 Installing the Software

The Netopsystems’ FEAD Optimizer dialog box appears.

Figure 1-2. Netopsystems’ FEAD Optimizer

NOTE It may take a few minutes to recompose the files. The next dialog box appears when the files have been recomposed.

The McAfee VirusScan Enterprise Setup dialog box appears.

Figure 1-3. McAfee VirusScan Enterprise Setup

20 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise

2 Review the product information:

a Click View Readme to display the README file, then click OK to return to the McAfee VirusScan Enterprise Setup dialog box.

b When you have finished reviewing the product information, click Next to open the Network Associates Licensing dialog box.

Figure 1-4. Network Associates Licensing

3 In the License expiry type text box, click to select the type of license.

NOTE The license type must match the length of the license that you agreed to, when purchasing the software. If you are unsure of which type of license to select, contact the person from whom you purchased the software.

4 In the Select country where purchased and used text box, click to select the country in which you are using the software.

5 Read the license agreement carefully, then choose one of these options:

If you agree to the license terms, select I accept the terms in the license agreement, then click OK to continue.

If you do not agree to the terms, select I do not accept the terms in the license agreement, then click Cancel to stop the installation process.

Installation Guide 21 Installing the Software

6 The procedure varies at this point depending on whether you are installing the software for the first time, or if you are installing the software over a previous version:

First-time installation — If you are installing the VirusScan Enterprise 7.1.0 software for the first time, or reinstalling the software, (Setup does not detect a previously installed version of NetShield, VirusScan, or VirusScan Enterprise), the Select Setup Type dialog box appears. Go to Starting the installation process on page 23 to continue.

Previous version — If you are installing the VirusScan Enterprise 7.1.0 software over a previous version of NetShield, VirusScan, or VirusScan Enterprise, you can preserve the settings for saved tasks, user-specified extensions, and exclusions settings from the previously installed version.

The Previous Version Detected dialog box appears.

Figure 1-5. Previous Version Detected

Preserve Settings. This option is selected by default. Deselect this option if you do not want to use the settings from the previous version of the McAfee anti-virus software.

NOTE If Preserve Settings is not selected, the settings from the previously installed version are removed.

Click Next to continue.

The Select Setup Type dialog box appears. Go to Starting the installation process on page 23 to continue.

22 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise

Starting the installation process You must have completed the steps in Using the Setup utility on page 19 to continue with a typical or custom installation.

In the Select Setup Type dialog box, decide which installation type you want to use:

Figure 1-6. Setup Type

Typical. Installs the software, together with all utilities, and provides the functionality for virus scanning, updating of virus definition (DAT) files, and sending alert messages. McAfee Security recommends this installation type for most environments.

NOTE Typical installation does not give you the capability of importing the AutoUpdate repository list or setting a user interface password. You must use Custom installation to use these features.

Go to Typical installation on page 24 to continue with the installation process.

Custom. Allows you to choose the specific features that you want to install. You also have the capability to import the AutoUpdate repository list, set up a user interface password, or install the alerting function to a workstation.

Go to Custom installation on page 26 to continue with the installation process.

Installation Guide 23 Installing the Software

Typical installation You must have completed the steps in Using the Setup utility on page 19, before you can continue with a typical installation:

1 In the Select Setup Type dialog box, select the setup type and installation path:

a Select Typical, if it is not already selected.

b Under Install To, select the installation path. By default, Setup installs the VirusScan Enterprise program files to this path: :\Program Files\Network Associates\VirusScan\

Accept the default path or click Browse to select another path.

c Click Disk Space to view the disk space requirements, then click OK to return to the Select Setup Type dialog box.

d Click Next to continue.

The Ready to install dialog box appears.

Figure 1-7. Ready to install

2 If you are satisfied with all of the installation settings you selected, click Install to begin the installation process.

NOTE To review or change any of the settings, click Back, then return to the Ready to install dialog box and click Install.

The Installing McAfee VirusScan Enterprise dialog box shows the status of the installation.

24 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise

When the setup process completes, the McAfee VirusScan Enterprise setup has completed successfully dialog box appears.

Figure 1-8. Setup completed successfully — Update and scan options

3 You can run an update task or on-demand scan task upon completion of installation. Choose any combination of these options:

Update Now. This option is selected by default. Deselect this option if you do not want to start the update task upon completion of installation.

Run On-Demand Scan. This option is selected by default. Deselect this option if you do not want to start the default on-demand scan task upon completion of installation.

4 Click Finish.

NOTE Depending on the options you selected in Step 3, the program may run the update program or an on-demand scan at this time. If you select both options, the update task runs first, then the on-demand scan task runs.

5 You may be requested to restart your computer. If so, the VirusScan Setup dialog box appears.

Click Yes to restart now, or click No to restart at a later time.

Installation Guide 25 Installing the Software

Custom installation You must have completed the steps in Using the Setup utility on page 19, before you can continue with a custom installation:

1 In the Select Setup Type dialog box, select the setup type and installation path:

a Select Custom.

b Under Install To, select the installation path. By default, Setup installs the VirusScan Enterprise program files in this path: :\Program Files\Network Associates\VirusScan\

Accept the default path or click Browse to select another path.

c Click Disk Space to view the disk space requirements, then click OK to return to the McAfee VirusScan Enterprise Setup dialog box.

d Click Next to continue.

The Feature Selection dialog box appears.

Figure 1-9. Feature Selection

2 Under Select which features you would like to install, select the individual features.

a Select specific features. Console is selected by default. When you select a feature, a brief description of its function appears in the right panel.

26 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise b For each selected feature, you can also select a corresponding action from the drop-down menu. Click next to the selected feature, to display the action menu, then select the action for that feature.

Figure 1-10. Feature action options

Choose one of these action options:

This feature will be installed on local hard drive. Installs the selected feature on the computer.

This feature, and all subfeatures, will be installed on local hard drive. Installs the selected feature and all of the features that are subordinate to it. For example, if you select Console, then AutoUpdate, E-mail Scanner, On-Access Scanner, and On-Demand Scanner are also installed.

This feature will not be available. Removes the selected feature, if it is already installed. c Under Install To, accept the default path or click Browse to select a new installation path.

Installation Guide 27 Installing the Software

d Click Next to continue.

The Install Alert Manager dialog box appears.

Figure 1-11. Install Alert Manager

NOTE The installation wizard detects whether Alert Manager is installed. If Alert Manager is already installed, the options on this dialog box are disabled.

3 Choose whether you want to install Alert Manager after the VirusScan Enterprise installation completes:

a Install Alert Manager Server. This option is selected by default if the current operating system is a server, Alert Manager has not already been installed, and Alert Manager is available in the specified location. Deselect this option if you do not want to install Alert Manager automatically after the VirusScan Enterprise installation completes.

NOTE If you select this option, the Alert Manager files must be in the location shown under Alert Manager installation files.

28 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise

b Alert Manager installation files. Accept the default path or click Browse to select a different location.

WARNING If you do not install Alert Manager as part of a custom installation the first time you install VirusScan Enterprise 7.1.0, you cannot use the VirusScan Enterprise installation utility to install Alert Manager at a later time. To install Alert Manager at a later time after VirusScan Enterprise has been installed, you must run the stand-alone Alert Manager installer. See the Alert Manager 4.7 Product Guide for more information.

c Click Next to continue.

The Product Configuration dialog box appears.

Figure 1-12. Product Configuration

4 In the Product Configuration dialog box, choose any combination of these options, then click Next to continue:

Import AutoUpdate repository list. This option is selected by default only if a repository list is included in the installation file (.MSI) or the command-line property (CMASOURCEDIR) has been set to a new location to point to the SITELIST.XML file. You can use McAfee Installation Designer to place the SITELIST.XML into the .MSI file. Select this option to import the repository list from the location you specify.

Installation Guide 29 Installing the Software

Import the AutoUpdate repository list. Accept the default location or click Browse to select a new location.

NOTE If you do not import a repository list at this time, and a repository list resides in the installation folder, that repository list will be imported even though you do not select the Import AutoUpdate repository list option. If a repository list is not imported, AutoUpdate performs updates using the default Network Associates site as its repository list. See the Updating section in the VirusScan Enterprise Product Guide for more information about the repository list.

Enable On-Access Scanner at the end of installation. This option is selected by default. Automatically starts the on-access scanner upon completion of the installation process. Deselect this option to manually start the on-access scanner after installation.

5 Click Next to continue.

The Security Configuration dialog box appears.

Figure 1-13. Security Configuration

6 In the Security Configuration dialog box, you can set a user interface password and determine which menu items users will be able to see.

a Under Configuration Password Protection, type and confirm the user interface password.

b Under Start menu, select Do not display the VirusScan items under the Start menu if you do not want to display these items on the menu.

30 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise c Under System tray icon and menu, choose one of these options:

Show the system tray icon with all menu options. This option is selected by default. Deselect this option if you do not want to display all menu items on the system tray icon.

Show the system tray icon with minimal menu options. Limit the menu items users can see on the system tray icon menu to About VirusScan Enterprise and On-Access Scan Statistics. All other menu items are not displayed on the system tray icon menu.

Do not show the system tray icon. Prevent users from accessing the system tray icon menu. If you select this option, the system tray icon menu is not displayed in the system tray.

NOTE After installation, you can choose to set or reset password protection and system tray icon options from the VirusScan Console. See Setting user interface options in the VirusScan Enterprise Product Guide for more information. d Click Next to continue.

The Ready to install dialog box appears.

Figure 1-14. Ready to install

Installation Guide 31 Installing the Software

7 If you are satisfied with all of the installation settings you selected, click Install to begin the installation process.

NOTE To review or change any of the settings, click Back, then return to the Ready to install dialog box and click Install.

The Installing McAfee VirusScan Enterprise dialog box shows the status of the installation.

When the setup process completes, the McAfee VirusScan Enterprise setup has completed successfully dialog box appears.

Figure 1-15. Setup completed successfully — Update and scan options

8 You can run an update task or an on-demand scan task upon completion of installation. Choose any combination of these options:

Update Now. This option is selected by default. Deselect this option if you do not want to start the update task upon completion of installation.

Run On-Demand Scan. This option is selected by default. Deselect this option if you do not want to start the default on-demand scan task upon completion of installation.

9 Click Finish.

NOTE Depending on the options you selected in Step 8, the program may run the update task or an on-demand scan at this time. If you select both options, the update task runs first, then the on-demand scan task runs.

32 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise

10 You may be prompted to restart your computer. If so, the VirusScan Setup dialog box appears.

Click Yes to restart now, or click No to restart at a later time.

Using the command line The VirusScan Enterprise Setup utility runs as a Microsoft Installer (.MSI) application, providing a wide array of custom installation options. Running the Setup utility from the command line allows you to customize the installation so that it runs the way you want and installs exactly the product features you want.

NOTE You can run Setup from the command line to install the VirusScan Enterprise software to your local computer, but only if you have local administrator rights. To install the software to a remote computer, you must use ePolicy Orchestrator or other product deployment software. Refer to the VirusScan Enterprise Configuration Guide for information about how to use ePolicy Orchestrator to install the program files.

1 Click Start, then select Run. The Run dialog box appears.

2 Type the command line you want to use in the Run dialog box, then click OK.

The Setup command-line syntax looks like this:

setup PROPERTY=VALUE[,VALUE] [/option] This syntax does not require any specific order in its elements, except that you may not separate a property and its value. The syntax consists of:

File name — The name of the executable file: setup.exe. Options — Any options are preceded by a forward slash (/) character and are not case-sensitive. The installation scenarios that appear later in this guide discuss some of the available options.

Properties — Any properties you want to use to shape how the installation runs.

Installation Guide 33 Installing the Software

Each property consists of:

A name, which must appear in uppercase letters. An equal (=) sign. One or more values, each separated by commas. Most property values must appear in all uppercase too, but some, such as True and False, must appear in mixed case. The Microsoft Installer permits a large variety of properties, all of which you can use to determine how your installation runs. To learn about those properties, see the Microsoft Installer documentation. To install VirusScan Enterprise software, specifically, you can use these additional properties:

ADDLOCAL. Installs specific features to the local computer.

INSTALLDIR. Specifies which installation folder you want to use. The value consists of the directory path.

PRESERVESETTINGS. Specifies whether Setup should retain the configuration options you used for previous on-access scanner installations. By default, its value is True.

REBOOT. Specifies whether Setup should restart your computer. You can force the computer to restart if it is required, or prevent it from restarting.

REMOVE. Removes one or more program features. You can specify a feature, or use the value ALL to remove all features. If you combine this property with the ADDLOCAL property, you can install all but one or two specific features.

REMOVEINCOMPATIBLESOFTWARE. Removes competitor’s anti-virus software that could conflict with this VirusScan Enterprise version. By default, its value is True.

The following sections describe some common scenarios that use command-line options to run custom installations.

Installing silently Use command-line options to set up VirusScan Enterprise software on each network node with little or no interaction from users. During a silent installation, Setup does not display any of its usual wizard panels, or offer the user any configuration options. Instead, you pre-configure these choices and run Setup in the background on each destination computer. You can install VirusScan Enterprise software on any unattended computer with or without the user’s knowledge, provided you have the necessary administrator rights.

34 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise

For example, setup/q:

Use /q to run a silent installation.

Other semi-silent installation methods are:

/qb Shows a small progress bar during installation, with a cancel button. /q+ Shows a success/failure installation completed dialog box. /qb+ Shows both the progress and completed dialog boxes. /qf Shows the full progress during installation, with a cancel button.

To record installation progress in a log file, add this option and parameter to the Setup command line: /l*v “c:\temp\log.txt” Here, c:\temp\log.txt can be any directory and any file name you want to use to create the log file. This option logs all installer activity, including all files copied, all registry keys added, and all .INI file changes. Replace the asterisk (*) shown in the command-line example, with one or more of these parameters to limit the type of data that the log file records:

i status messages w non-fatal warnings e all error messages a action starts r action-specific records u user requests c initial user interface parameters m out-of-memory or fatal exit information o out-of-disk space messages p terminal properties + append to existing file ! flush each line to the log

Installation Guide 35 Installing the Software

Installing to a custom directory To install VirusScan Enterprise software to a custom directory, add the INSTALLDIR property to the command line, then follow the property with a value for the directory you want to use. To install VirusScan Enterprise software to C:\My Anti-Virus Software, for example, type this line at the command prompt:

setup INSTALLDIR=“c:\My Anti-Virus Software”/q Use quotes only if the destination directory name has spaces. You can add the /q switch to run the installation silently.

Selecting specific features to install When you run Setup from the command line to install specific program features, the utility installs those features according to a pre-existing hierarchy. This means that if you choose to install only the VirusScan Enterprise shell extensions, for example, Setup knows that you must have SCAN32.EXE, the VirusScan Enterprise application, installed to use the extensions. It therefore installs both this file and any related files.

To specify the features that you want to install, Setup requires that you add specific feature names as command-line parameters. The feature names you can specify from the command line are:

Feature Name Description

AutoUpdate The AutoUpdate utility. Console The VirusScan Enterprise Console. EmailScan The e-mail scanner and the e-mail scan extension. OnAccessScanner The on-access scanner. OnDemandScanner The on-demand scanner. ShellExtentions Extensions that add right-click functionality that enables you to scan individual files.

NOTE You can specify features, or use the ALL property to install all the features.

To use these feature names in a command line, specify the destination and the feature name, exactly as they appear in the table.

For example, to add the VirusScan Enterprise application to the local system, type this line at the command prompt:

setup.exe ADDLOCAL=ALL/q

36 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise

Use a comma to separate values when installing more than one feature. To add the on-demand scanner and the on-access scanner together, for example, type this line at the command prompt:

setup.exe ADDLOCAL=OnAccessScanner,OnDemandScanner/q

For a complete installation, type this line at the command prompt:

setup.exe ADDLOCAL=ALL/q

To remove all VirusScan Enterprise components, type this line at the command prompt:

setup.exe REMOVE=ALL/q

To install all features except one, for example the e-mail scanning feature, type this line at the command prompt:

setup.exe ADDLOCAL=ALL REMOVE=EmailScan/q

You can also choose different features for an installation that you do not run silently. If, for example, you leave off the /q option in any of the command line examples shown, the Custom Setup wizard panel (see Custom installation on page 26) shows only the features you specify as those available for installation. If you use these same examples to specify a feature set for installation, Setup installs only the features you specified during a Typical installation.

Installation Guide 37 Installing the Software

Customizing installation properties You can customize the installation process using specific properties when installing from the command line. The customized properties that you can specify are:

Command-line Property Function

ALERTMANAGERSOURCEDIR Sets the default Alert Manager source path. The default path is \AMG.

You can set it yourself in SETUP.INI.

CMASOURCEDIR Set the source path for the SITELIST.XML. The default path is: %TEMP%\NAITemp. ENABLEONACCESSSCANNER False = A False value cannot be set. True = Enable on-access scanner upon completion of installation. This is the default. Note: If you do not want to enable the on-access scanner, set the property to “”. This literally means ENABLEONACCESSSCANNER=“”, an empty string.

EXTRADATSOURCEDIR Set the source path for the EXTRA.DAT. During installation, the EXTRA.DAT is copied into the location where the engine files reside. FORCEAMSINSTALL True = Install Alert Manager, if present. INSTALLDIR Sets the default installation directory. INSTALLCHECKPOINT False = Do not install the Check Point SCV integration. True = Install the Check Point SCV integration. LOCKDOWNVIURUSSCANSHORTCUTS False = A False value cannot be set. True = Do not display any shortcuts under the start menu. Note: To allow the shortcuts to be installed, set the property to “”. This literally means LOCKDOWNVIRUSSCANSHORTCUTS=“” an empty string. This is the default.

38 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise

Command-line Property Function

PRESERVESETTINGS Preserves settings upon upgrade of NetShield 4.5, VirusScan 4.5.1, or VirusScan Enterprise 7.0. False = A False value cannot be set. True = Preserve settings. This is the default. Note: If you do not want to preserve settings, set the property to “”. This literally means PRESERVESETTINGS=“”, an empty string. RUNAUTOUPDATE False = A False value cannot be set. True = Run update upon completion of installation. This is the default. Note: If you do not want to run update upon completion of installation, set the property to “”. This literally means RUNAUTOUPDATE=“”, an empty string. RUNONDEMANDSCAN False = A False value cannot be set. True = Run a scan of all local drives upon completion of installation. This is the default. Note: If you do not want to run the on-demand scanner at completion of installation, set the property to “”. This literally means RUNONDEMANDSCAN=“”, an empty string.

Installation Guide 39 Installing the Software

Command-line Property Function

RUNAUTOUPDATESILENTLY False = A False value cannot be set. True = Run silent update upon completion of installation. The default is an empty string. Note: If you do not want to run a silent update upon completion of installation, set the property to “”. This literally means RUNAUTOUPDATESILENTLY=“”, an empty string. RUNONDEMANDSCANSILENTLY False = A False value cannot be set. True = Run on-demand scan silently upon completion of installation. The default is an empty string. Note: If you do not want to run a silent on-demand scan upon completion of installation, set the property to “”. This literally means RUNONDEMANDSCANSILENTLY=“”, an empty string.

Setting restart options You can force a restart if one is required, or prevent the destination computer from restarting during the installation. To do this, add the REBOOT property to the command line:

REBOOT=F forces the restart if one is required.

REBOOT=R prevents the restart. If you must first install the Windows Installer service on a destination computer, Setup requires you to restart, whether you force or prevent a restart for other reasons. Setup resumes after MSI forces a restart. It then uses the options you set to determine whether to force or prevent a restart after the installation.

setup REBOOT=R/q This example runs a silent installation and prevents a system restart.

Removing incompatible software By default, Setup removes incompatible software during a silent installation. Incompatible software is defined as all competitors’ products. If you do not want to remove incompatible software, add the REMOVEINCOMPATIBLESOFTWARE property to the command line with the value False:

setup REMOVEINCOMPATIBLESOFTWARE=False

40 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise

Preserving settings By default, Setup preserves your settings from previous VirusScan and NetShield installations. To install the new VirusScan Enterprise version without previous settings, add the PRESERVESETTINGS property to the command line with the value set to an empty string:

setup PRESERVESETTINGS=“”

Running Setup from a login script To install VirusScan Enterprise software at the time each of your destination computers starts, you can add a Setup command line to your login script and include any logic you think necessary to ensure that the installation runs once; checking for the VirusScan Enterprise default program directory, for example. The command line should include all of the options and properties you want to use to govern how Setup runs.

In order to use a login script for this purpose, you must also copy or “push” the VirusScan Enterprise installation package to a local directory on the destination computer. You may not use a login script to install VirusScan Enterprise software from elsewhere on your network. To install VirusScan Enterprise software from a remote location on the network, use McAfee ePolicy Orchestrator management software.

Installed files During the VirusScan Enterprise installation process, files are installed in the installation path, in these folders:

VirusScan folder on page 42.

Res09 folder on page 43.

Engine folder on page 43.

NOTE The installation path is determined during the installation process. The default installation path is:

:\Program Files\Network Associates\VirusScan\

Installation Guide 41 Installing the Software

VirusScan folder These files are installed in the installation directory, VirusScan folder:

Additional Preserved Settings NaiEvent.dll

AdsLokUU.Dll nailite.dll

dssdata.h NaKrnlU.Dll

DSSDATA.INI nautilu.dll

emconfig.exe NTClient.dll

ftcfg.dll Packing.lst

ftl.dll pireg.exe

license.txt readme.txt

logparser.exe scan32.exe

McAVDetect.DLL ScanEmal.Dll

mcavscv.dll scncfg32.exe

mcconsol.exe scnstat.exe

Mcshield.exe SDATPACK.LST

mcupdate.exe shcfg32.exe

MERTool.url shext.dll

midutil.dll shstat.exe

NaEventU.Dll shutil.dll

naiann.dll SVCPWD.exe

naiavf5x.cat VSPlugin.dll

naiavf5x.inf VSTskMgr.exe

naiavf5x.sys vsupdate.dll

naiavfin.exe

42 VirusScan® Enterprise software version 7.1.0 Installing VirusScan Enterprise

Res09 folder These files are installed in the installation directory, Res09 folder:

FtCfgRc.dll ScnStat.DLL

McConsol.DLL SEmalRes.Dll

McShield.DLL ShCfg32.DLL

mcupdate.DLL shextres.dll

NaEvtRes.Dll ShStat.DLL

NaUtlRes.Dll ShUtilRc.DLL

Product.DLL VSE.chm

Scan32.DLL VsTskMgr.DLL

ScnCfg32.DLL AMG.chm (if Alert Manager is installed)

Engine folder These files are installed in the Engine folder that is located at:

:\Program Files\Common Files\Network Associates\

avparam.dll messages.dat

clean.dat names.dat

EXTRA.DAT scan.dat

license.dat scan.exe

mcscan32.dll SCAN86.EXE

MCTOOL.EXE SignLic.Txt

Installation Guide 43 Installing the Software

Testing your installation Once installed, the software can scan your system for infected files. You can test whether it is installed correctly and can properly scan for viruses by implementing a test developed by the European Institute for Computer Anti-Virus Research (EICAR), a coalition of anti-virus vendors, as a method for their customers to test any anti-virus software installation. To test your installation:

1 Using a standard Windows text editor, such as Notepad, type the following string, on a single line with no spaces or line breaks:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$ H+H*

2 Save the file with the name EICAR.COM. The file size is 68 bytes. Make a note of the folder in which you saved the file.

3 Start the program.

To test the on-demand scanner, create an on-demand scan task that examines the folder where you saved EICAR.COM. When the scanner examines this file, it reports finding the EICAR test file.

To test the on-access scanner, confirm that the on-access scanner is configured to scan files written to the computer and files read from the computer. See Configuring the on-access scanner in the VirusScan Enterprise Product Guide for additional information. Locate the EICAR.COM file and try to copy or move it to another location. The scanner reports finding the EICAR test file when it examines the file.

NOTE This file is not a virus—it cannot spread, infect other files, or harm your system. Delete the file when you have finished testing your installation to avoid alarming other users.

44 VirusScan® Enterprise software version 7.1.0 Modifying VirusScan Enterprise Modifying VirusScan Enterprise You can use the Setup utility to modify or repair the VirusScan Enterprise program files.

These topics are covered in this section:

Starting the Setup utility.

Modifying program features on page 47.

Reinstalling or repairing program files on page 49.

Starting the Setup utility 1 Click Start, then select Run. The Run dialog box appears.

Figure 1-16. Run

2 Type :\SETUP.EXE in the text box provided, then click OK.

Here, : represents the drive letter for your CD-ROM, or the path of the folder that contains the extracted program files. To search for the correct files on your hard disk or CD, click Browse. If your copy of the software came on a Total Virus Defense CD, you must also specify which folder contains the VirusScan Enterprise software.

Installation Guide 45 Installing the Software

The Program Maintenance dialog box appears.

Figure 1-17. Program Maintenance

3 Select the program maintenance activity you want to perform:

Modify. This option is selected by default. Change which program features are installed. This option uses the Feature Selection dialog box to change the installed features.

See Modifying program features on page 47 to complete the modification process.

Repair. Select this option to reinstall or repair the program files.

See Reinstalling or repairing program files on page 49 to complete the reinstall or repair process.

Remove. Select this option to remove the program files. See Removing the Software on page 53 for more information about removing program files.

46 VirusScan® Enterprise software version 7.1.0 Modifying VirusScan Enterprise

Modifying program features 1 Select Modify in the Program Maintenance dialog box, then click Next.

The Feature Selection dialog box appears.

Figure 1-18. Feature Selection — Modify

2 Under Select which features you would like to install, select the individual features you want to install:

Select specific features. Console is selected by default. When you select a feature, a brief description of its function appears in the right panel.

For each selected feature, you can also select a corresponding action from the drop-down menu. Click next to the selected feature, to display the action menu, then select the action for that feature.

Figure 1-19. Feature action options

Installation Guide 47 Installing the Software

Choose one of these action options:

This feature will be installed on local hard drive. Installs the selected feature on the computer.

This feature will not be available. Removes the selected feature, if it is already installed.

NOTE The Install To path and Disk Space features are disabled. To change the installation path, you must first remove the product, then reinstall the product to the required path.

3 Click Next to continue.

The Product Configuration dialog box appears.

Figure 1-20. Product Configuration — Modify

48 VirusScan® Enterprise software version 7.1.0 Modifying VirusScan Enterprise

4 In the Product Configuration dialog box, choose whether you want to enable the on-access scanner at the end of the installation process:

NOTE The Import AutoUpdate repository list option is disabled. To import the repository list, see the Updating section in the VirusScan Enterprise Product Guide.

5 Click Next to open the Ready to install dialog box.

6 If you are satisfied with all of the installation settings you selected, click Install to begin the installation process.

NOTE To review or change any of the settings, click Back, then return to the Ready to install dialog box and click Install.

7 When the setup process completes successfully, click Finish.

Reinstalling or repairing program files Use this feature to reinstall or repair product components.

WARNING If you manually remove or rename files, the repair feature may fail. See the Troubleshooting appendix in the VirusScan Enterprise Product Guide for detailed instructions about repairing files after they have been removed or renamed.

1 Select Repair in the Program Maintenance dialog box, then click Next.

Installation Guide 49 Installing the Software

The Reinstall or Repair the Product dialog box appears.

Figure 1-21. Reinstall or Repair the Product

2 Select from these maintenance options:

Reinstall McAfee VirusScan Enterprise. This option is selected by default. Reinstalls the program files, registry keys and shortcuts.

Detect and repair missing or corrupt files. Finds missing or corrupt files and repairs them.

Re-write registry keys.

WARNING Neither the Reinstall McAfee VirusScan Enterprise or the Detect and repair missing or corrupt files features supports reinstalling or repairing update components. If an AutoUpdate file is removed or corrupted, you must remove the update component, then reinstall it.

To remove the update component using VirusScan Enterprise, use the Setup utility or the command line. See Removing the Software on page 53 for more information.

If the update component was deployed using an ePolicy Orchestrator environment, you can remove the program files, and the update component will be installed again by ePolicy Orchestrator. See the ePolicy Orchestrator Product Guide for more information.

50 VirusScan® Enterprise software version 7.1.0 Modifying VirusScan Enterprise

3 Click Install.

When the setup process completes, the McAfee VirusScan Enterprise setup has completed successfully dialog box appears.

Figure 1-22. Setup completed successfully — Update and scan options

4 You can run an update task or an on-demand scan task upon completion of installation. Choose any combination of these options:

Update Now. This option is selected by default. Deselect this option if you do not want to start the AutoUpdate task upon completion of installation.

Run On-Demand Scan. This option is selected by default. Deselect this option if you do not want to start the default on-demand scan task upon completion of installation.

5 Click Finish.

6 You may be required to restart your computer. If so, the VirusScan Setup dialog box appears.

Click Yes to restart now, or click No to restart at a later time.

Installation Guide 51 Installing the Software

52 VirusScan® Enterprise software version 7.1.0 Removing the Software 2

You can remove the VirusScan Enterprise program files:

Using the Setup utility on page 54.

Using the command line on page 57.

Using the Add/Remove Programs utility on page 57.

Installation Guide 53 Removing the Software Using the Setup utility On the computer from which you want to remove the program:

1 Open the McAfee VirusScan Enterprise Setup dialog box using one of these methods:

If your copy of the software is on the product CD:

a Insert the CD into the CD-ROM drive.

b Click Install from the Welcome dialog box.

If you downloaded the software:

a Click Start, then select Run. The Run dialog box appears.

Figure 2-1. Run

b Type :\SETUP.EXE in the text box, then click OK.

Here, represents the drive letter for your CD-ROM, or the path of the folder that contains the extracted program files. To search for the correct files on your hard disk or CD, click Browse. If your copy of the software came on a product suite CD, you must also specify which folder contains the specific software package.

54 VirusScan® Enterprise software version 7.1.0 Using the Setup utility

The Program Maintenance dialog box appears.

Figure 2-2. Program Maintenance

2 Select Remove, then click Next.

The Remove McAfee VirusScan Enterprise dialog box appears.

Figure 2-3. Remove VirusScan Enterprise

3 Click Remove to start the removal process.

4 When the setup process completes successfully, click Finish.

Installation Guide 55 Removing the Software

The uninstaller detects whether there are any remaining files or directories. These are files or directories, for example, log files or other files or directories added by the user, that were not installed initially with the VirusScan Enterprise installation.

Figure 2-4. Remove remaining files

When the program files are removed, two files are left in the %TEMP%\NAI Logs directory. These files are used for debugging purposes:

VSEUninst.log

VSEInst.log

5 Click Yes to remove the remaining files, or click No if you do not want to remove the remaining files.

6 Restart your computer after the removal process completes.

WARNING We strongly recommend that you restart your computer after removing files. The restart should be performed before installing again.

When you remove files using SETUP.EXE or the command line, some files or stopped services may not be removed. For example, if you remove the VirusScan Enterprise product while the Network Associates Task Manager or the Network Associates McShield services are stopped, these services would not be removed. Restarting after removing files ensures that all files and services are removed before installing again.

56 VirusScan® Enterprise software version 7.1.0 Using the command line Using the command line 1 Open the Windows command-line component using one of these methods:

Select Command Prompt from the Start menu.

Select Run from the Start menu.

2 Type this string at the command prompt or in the Run dialog box:

:\SETUP.EXE/x Here, represents the drive letter for your CD-ROM, or the path of the folder that contains the extracted program files. To search for the correct files on your hard disk or CD, click Browse. If your copy of the software came on a product suite CD, you must also specify which folder contains the specific software package.

3 Restart your computer after the removal process completes.

WARNING We strongly recommend that you restart your computer after removing files. The restart should be performed before installing again.

Using the Add/Remove Programs utility To access the Add/Remove Programs utility that is included in the Windows Control Panel, click Start, then select Settings | Control Panel | Add/Remove Programs.

Installation Guide 57 Removing the Software

58 VirusScan® Enterprise software version 7.1.0 Configuring Netopsystems’ FEAD Optimizer A

The VirusScan Enterprise 7.1.0 installation file (.MSI) has been optimized using Netopsystems’ FEAD Optimizer technology. This technology reduces the size of the installation package. These topics are included in this section:

Command-line properties and switches.

Optimized file defaults on page 60.

Command-line properties and switches When executing the SETUP.EXE from the command line, command-line properties and switches can be used with an optimized file to customize the recomposing process of the destination file.

The syntax is:

setup.exe [...] The switches are defined as:

= | The VirusScan Enterprise switches are the parameters that you pass to the VirusScan Enterprise Setup utility. For example: setup.exe -s -nos_d installdir=“c:\abc def” /L

setup.exe nocdi=true -nos_o“d:\temp” -nos_s reboot=a

Installation Guide 59 Configuring Netopsystems’ FEAD Optimizer

These command-line properties or switches may be used with an optimized file:

Command-line property or switch Function

-nos_ne No execution — Extracts the setup files from the SETUP.EXE, but does not execute the SETUP.EXE or delete the setup files. -nos_nd No delete — Do not delete the setup files after executing the SETUP.EXE. If the -nos_-ne switch is also present, the -nos_-nd switch is overridden. -nos_d Delete — Deletes the setup files after executing the SETUP.EXE. If the -nos_-ne switch is also present, the -nos_-d switch is overridden. -nos_s Silent mode — Installs the setup files in silent mode. (Installs automatically when using /s, /S, -s, -S, /q, /Q, -q, -Q). -nos_o“” Output folder — The folder to which you want to extract the setup files.

Optimized file defaults The default actions are set as follows:

Action Default

Execution Yes Delete Yes Silent No Output folder %TEMP%\McAfee VirusScan Enterprise 7

60 VirusScan® Enterprise software version 7.1.0 Configuring Check Point B

The VirusScan Enterprise software has been enhanced to integrate with Check Point™ VPN-1/FireWall-1® SCV.

We have provided the McAfee Check Point Secure Configuration Verification (SCV) plug-in (MCAVSCV.DLL) to integrate the two products. This plug-in is a Dynamic Link Library which meets the requirements of the Check Point™ ® VPN-1/FireWall-1 SCV (Secure Configuration Verification) Specification, dated November 2001. This specification can be found at the Open Platform for Security (OPSEC) web site:

http://www.opsec.com

When installed and enabled, the Check Point product can be configured to allow or block access based on the protected state of VirusScan Enterprise on the system.

These topics are included in this section:

Client computer installation on page 62.

Administrator configuration on page 63.

Installation Guide 61 Configuring Check Point Client computer installation When installing theVirusScan Enterprise 7.1.0 software, these files are also installed into the installation directory for use with Check Point:

MCAVSCV.DLL

MCAVDETECT.DLL

The default installation directory is:

:\Program Files\Network Associates\VirusScan\

The SCV plug-in is registered with Check Point VPN-1 and/or Firewall-1 if the Check Point SecuRemote™ registry entry is present. If the Check Point product is installed after the VirusScan Enterprise product, you must reinstall VirusScan Enterprise 7.1.0.

To register the MCAVSCV.DLL plug-in, follow these steps:

1 Stop the SecureClient service.

2 Install the VirusScan Enterprise 7.1.0 product.

3 Start the SecureClient service, after VirusScan Enterprise has registered the SCV plug-in.

After registration completes, the MCAVSCV.DLL plug-in can be used by VPN-1 or Firewall-1 to enforce VirusScan Enterprise protection, providing that the Check Point administrator has:

Enabled SCV checking.

Added the McAfee SCV section to the LOCAL.SCV on the security policy server for the Check Point systems.

62 VirusScan® Enterprise software version 7.1.0 Administrator configuration Administrator configuration The Check Point administrator can edit the policy file (LOCAL.SCV) on the Check Point server to change the VirusScan Enterprise protection requirements for VPN-1 and/or Firewall-1.

The SCV Editor tool is located at:

http://www.checkpoint.com/techsupport/downloadsng/utilities.html

For an explanation of syntax used for the LOCAL.SCV, see the Check Point VPN-1 documentation that was provided with the Check Point product.

Following is a sample section of a LOCAL.SCV file that shows a policy for the MCAVSCV.DLL plug-in that is included in the VirusScan Enterprise installation package:

: (mcavscv

:type (plugin)

:parameters (

:product (VSE)

:minimum_product (7.1)

:minimum_engine (4260)

:minimum_dat (4260)

:dat_age_max_days (30)

:begin_admin (admin)

:send_log (alert)

:mismatchmessage

McAfee VirusScan Enterprise protection is not running or is out of date, please run AutoUpdate or enable the on-access scanner.

:end (admin)

) )

Installation Guide 63 Configuring Check Point

The Check Point administrator can change the VirusScan Enterprise protection requirements for VPN-1 and/or Firewall-1 as follows.

The plug-in name is mcavscv and must be in lowercase letters. We assume that the Check Point Security policy administrator is familiar with configuring the SCV policy for Check Point products.

:product is optional and is assumed to be VSE for VirusScan Enterprise. No other product values are currently implemented. The VirusScan Enterprise protection check returns not protected if VirusScan Enterprise is not installed on a system running this SCV check.

:minimum_product is optional and is ignored if not included in the SCV file. Current valid values are 7.0 and 7.1. The VirusScan Enterprise protection check returns not protected if the installed version of the product (currently always VSE) is less than the value specified on a system running this SCV check.

:minimum_engine is optional and is assumed to be 4260 if not specified. The VirusScan Enterprise protection check returns not protected if the installed engine version is less than the value specified on a system running this SCV check.

:minimum_dat is optional and is ignored if not specified. The VirusScan Enterprise protection check returns not protected if the installed DAT version is less than the value specified on a system running this SCV check.

:dat_age_max_days is optional and is assumed to be 31 if not specified. The VirusScan Enterprise protection check returns not protected if the installed DAT is older than the number of days specified, on a system running this SCV check.

:mismatchmessage specifies the message to display if the VirusScan Enterprise protection check indicates not protected. The Check Point administrator configures where these messages are logged or if they should be displayed to the user. The VirusScan Enterprise protection check returns a protected status to the Check Point VPN-1 or Firewall-1 product if all of the above checks have been completed (or ignored) and these conditions are met:

No not protected results are indicated.

The VirusScan Enterprise on-access scanner is currently running and enabled.

Otherwise, a not protected status is returned.

64 VirusScan® Enterprise software version 7.1.0 Index

A G Add/Remove Programs utility, 57 getting information, 7 AVERT (Anti-Virus Emergency Response Team), contacting, 8 I installation package, pre-configuring B with ePolicy Orchestrator, 14 before you begin, 10 with McAfee AutoUpdate Architect and McAfee beta program, contacting, 8 Installation Designer, 14 installing VirusScan Enterprise, 9 C before you begin, 10 command-line installation, 33 custom installation, 26 customizing installation properties, 38 files installed, 41 installing silently, 34 from a product download, 19 installing specific features, 36 from the product CD, 19 installing to a custom directory, 36 installing program files, 18 login script, 41 start the installation process, 23 parameters, 35 system requirements, 11 preserving settings, 41 server, 11 removing incompatible software, 40 workstation, 12 setting restart options, 40 Terminal Services, 16 syntax, 33 testing your installation, 44 conventions used in this manual, 6 typical installation, 24 custom installation, 26 using a login script, 41 customer service, contacting, 8 using McAfee Installation Designer, 18 using the command line (See command-line D installation), 33 DAT file updates, web site, 8 using the Setup utility, 19 deployment, updating, and management options, 13 K documentation for the product, 7 KnowledgeBase search, 8 download web site, 8 downloading the product software, 19 L license, 21 E login-script installation, 41 EICAR test file, 44 M F manuals, 7 files installed, 41 McAfee Security University, contacting, 8

Installation Guide 65 Index modifying VirusScan Enterprise program files, 45 workstation, 12 selecting features, 47 restart options via command line, 40 using the Setup utility, 45 S N security headquarters, contacting AVERT, 8 Netopsystems’ FEAD® Optimizer®,configuring, 59 service portal, PrimeSupport, 8 Setup utility O configuring the optimized file, 59 on-demand scan installing software, 19 custom installation, 32 modifying software, 45 reinstalling or repairing program files, 51 removing software, 54 typical installation, 25 silent installs via command line, 34 operating systems supported submitting a sample virus, 8 server, 11 system requirements, 11 workstation, 12 product license, 17 server, 11 P workstation, 12 pre-configuring the VirusScan Enterprise installation package T using ePolicy Orchestrator, 14 technical support, 8 using McAfee AutoUpdate Architect and Terminal Services, 16 McAfee Installation Designer, 14 testing your installation, 44 PrimeSupport, 8 training web site, 8 product documentation, 7 typical installation, 24 product license, 17 product training, contacting, 8 U program files update now installing, 18 custom installation, 32 removing, 53 reinstalling or repairing program files, 51 R typical installation, 25 upgrade web site, 8 RAM requirements server, 11 V workstation, 12 Virus Information Library, 8 reinstalling program files, 49 virus, submitting a sample, 8 removing incompatible software via command line, 40 removing VirusScan Enterprise, 53 using the Add/Remove Programs utility, 57 using the command line, 57 using the Setup utility, 54 repairing program files, 49 requirements server, 11

66 VirusScan® Enterprise software version 7.1.0